Skip to main content

​
Overview

The Panda Security integration enables ThreatAware to collect endpoint protection and security data from your Panda Security deployment through the Watchguard Cloud Portal.
Connection Method: API Setup Time: 15 minutes Access Required: Panda Security Administrator account

​
Data collected

The Panda Security integration provides:
  • Endpoint protection status
  • Threat detection and response data
  • Security policy compliance
  • Antivirus and malware information

​
Use cases

Endpoint Security Monitoring

Monitor the security status of all endpoints protected by Panda Security

Threat Detection

Track detected threats and security incidents across your environment

Compliance Validation

Verify endpoints comply with security policies

Security Posture Tracking

Monitor overall endpoint security health

​
Setup instructions

1

Access ThreatAware Integration

Begin the integration setup in ThreatAware:
  • Log in to the ThreatAware dashboard
  • Navigate to Settings → Integrations
  • Use the search bar to find Panda
  • Click Connect to open the configuration window
2

Log in to Watchguard Cloud Portal

Access the Panda Security management console:
3

Enable and Configure API Access

Enable API access and generate credentials:
  • Navigate to Administration > Managed Access
  • Click Enable API Access
  • Generate both:
    • Read-Only password
    • Read-Write password
  • Note the Read-Only password for use in ThreatAware
Only use the Read-Only password for ThreatAware. This provides read-only access to your Panda environment as recommended for security integrations.
4

Copy Required API Credentials

Gather all API credentials needed:
  • Copy the Access ID (Read-Only)
  • Copy the Authentication API URL
  • Copy the API URL (base)
  • Copy the API Key
  • Keep the Read-Only password generated in the previous step
Store these credentials securely for entry into ThreatAware.
5

Retrieve Account ID

Find your Panda Account ID:
  • In the Watchguard Cloud Portal, click My Account in the left sidebar
  • Copy the displayed Account ID
  • Save this for the next step
6

Configure in ThreatAware

Enter all credentials into ThreatAware:
  • Return to the ThreatAware integration window
  • Fill in the required fields:
    • Access ID: Read-Only Access ID from Step 4
    • Account ID: Account ID from Step 5
    • API Password: Read-Only password from Step 3
    • Authentication API URL: From Step 4
    • API URL: Base API URL from Step 4
    • API Key: From Step 4
  • Click Connect to establish the integration
7

Verify Connection

Confirm successful integration:
  • Check that the integration status in ThreatAware shows Active
  • Wait 5-10 minutes for initial data synchronization
  • Verify Panda security data appears in ThreatAware

​
Required credentials

Field Name: Panda Access ID Type: String Description: The read-only access identifier for API accessGenerated in Watchguard Cloud Portal under:
  • Administration > Managed Access > API Access settings
Field Name: Panda Account ID Type: String Description: Your unique Panda Security account identifierFound in the Watchguard Cloud Portal:
  • Click My Account in the left sidebar
  • Copy the displayed Account ID
Field Name: Panda API Password Type: Password (encrypted) Description: The read-only API password for authenticationGenerated in Watchguard Cloud Portal:
  • Administration > Managed Access > Enable API Access
  • Generate the Read-Only password
Store this password securely. It provides access to your Panda security data.
Field Name: Panda Authentication API URL Type: String Description: The URL endpoint for API authenticationProvided in the API Access configuration page
Field Name: Panda Base API URL Type: String Description: The base URL for all API requestsProvided in the API Access configuration page
Field Name: Panda API Key Type: Password (encrypted) Description: The API key for authenticationGenerated in the API Access configuration

​
Verification and testing

After setup, verify the integration is working correctly:
  1. Check Integration Status
    • Navigate to Settings → Integrations in ThreatAware
    • Confirm Panda shows Active status
    • Check the last sync timestamp
  2. Verify Data Collection
    • Wait 5-10 minutes for initial data synchronization
    • Search ThreatAware dashboard for Panda security data
    • Verify endpoint information matches your Panda deployment
  3. Test Queries
    • Create a test query to filter endpoints by Panda security status
    • Verify threat data and compliance status are available

​
Troubleshooting

Symptoms: Integration fails with authentication errorSolutions:
  • Verify all credentials are copied exactly as shown in Watchguard Portal
  • Ensure there are no extra spaces at the beginning or end of credentials
  • Confirm the API password is the Read-Only password, not Read-Write
  • Check that API Access is enabled in Administration > Managed Access
  • Regenerate API credentials and try again
Symptoms: Integration connects but no data appearsSolutions:
  • Verify your account has API access permissions
  • Confirm the Read-Only password was generated and enabled
  • Check that your Panda organisation has active endpoints
  • Review Watchguard Cloud Portal logs for any API errors
  • Contact Panda support if permissions are unclear
Symptoms: Integration fails to connect or frequently times outSolutions:
  • Verify your network allows HTTPS (443) outbound access
  • Check that the API URLs are accessible from your ThreatAware instance
  • Test the URLs in a browser to ensure they’re reachable
  • Temporarily disable any corporate proxy or VPN and test
  • Contact Watchguard support if API endpoints are blocked
Symptoms: Integration shows active but endpoint data doesn’t appearSolutions:
  • Wait up to 15 minutes for initial data synchronization
  • Verify you have active endpoints in your Panda deployment
  • Check that endpoints are properly managed in Watchguard Cloud Portal
  • Confirm the account ID belongs to an organisation with endpoints
  • Review ThreatAware integration logs for sync errors

​
Additional resources

Watchguard Cloud Portal

Access your Panda Security management console

Panda Security Documentation

Official Panda Security and Watchguard documentation

API Configuration Guide

Detailed API setup and configuration instructions

ThreatAware Support

Contact ThreatAware support for integration assistance

​
Best practices

Use Read-Only Access
  • Always use the Read-Only password for integrations
  • Never use the Read-Write password for external systems
  • Create dedicated Read-Only credentials specifically for ThreatAware
Credential Security
  • Store API credentials in your organisation’s password manager
  • Regenerate credentials if you suspect compromise
  • Document where credentials are stored for your team
  • Rotate credentials annually or per your security policy
Monitor API Activity
  • Periodically review Watchguard Cloud Portal logs for API usage
  • Set up alerts for failed API authentication attempts
  • Monitor data synchronization frequency to ensure integration health